GitHub Advisoryadvisory · Maven

GHSA-rp4x-xpgf-4xv7 Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection

HIGH Published 2022-05-24 Modified 2022-12-20 Official page ↗
Aliases
CVE-2020-2196
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:selenium
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-352
Reviewed
2022-12-20

Affected packages

• Maven org.jenkins-ci.plugins:selenium: <= 3.141.59 (no fix yet)

Description

Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints. This allows attackers to perform the following actions: • Restart the Selenium Grid hub. • Delete or replace the plugin configuration. • Start, stop, or restart Selenium configurations on specific nodes. Through carefully chosen configuration parameters, these actions can result in OS command injection on the Jenkins controller.

Related

Alias · CVE (1)

  • CVE-2020-2196 Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perform all… vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References